Asked by:

Traffice from other internal IP address not belong to us

Question

We have some web service running on a Windows Server 2008 R2 Virtual Machine.

Recently, we have detected large amount of network traffic coming to us from a internal IP 100.65.12.190. This is within same subnet where our VM server located and is sending requests to random port numbers.